[squid-users] WARNING: no_suid: setuid(0): (1) Operation not permitted

2021-01-13 Thread David Touzeau
Hi This error is generated every 15 minutes when using any authenticator helper (ntlm, kerberos...) Is there a way to investigate on this issue ? kidxx| WARNING: no_suid: setuid(0): (1) Operation not permitted Sometimes, after rebooting the system, issue is fixed for an undetermined period

[squid-users] Incomplete Certificate Chain for wiki.squid-cache.org

2021-01-13 Thread Dieter Bloms
Hello, the wiki of squid cache project (wiki.squid-cache.org) has an incomplete certificate chain. I can't access the website with enabled sslbump and tlsv1.3 support, because squid isn't able to download the missing intermediate certificate on its own. The administrator of that website should ad

[squid-users] Squid vs. Telegram

2021-01-13 Thread Ralf Hildebrandt
Recently I'm having issues connecting to Telegram (or rather keeping a connection). My log is filled with lots of TCP_MISS/502 3925 POST http://149.154.167.92/api - HIER_DIRECT/149.154.167.92 text/html and TCP_MISS_ABORTED/000 0 POST http://149.154.167.92/api - HIER_DIRECT/149.154.167.92 ali

Re: [squid-users] WARNING: no_suid: setuid(0): (1) Operation not permitted

2021-01-13 Thread Eliezer Croitoru
squid -v output might help to understand a bit. I do not know if the helper is the one that does that but it’s a matter of permissions or FD limits. This is as far as I know. If you or anyone have the option to create a full kerberos lab it might help to re-create this issue. I can crea

Re: [squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

2021-01-13 Thread Alex Rousskov
On 1/13/21 4:33 PM, Greg Hulands wrote: > I am setting up squid 5.0.3 and during testing I have found some > websites fail to have their certificates generated correctly. I am > able to go to sites like YouTube.com and have the certificates for > that be generated correctly, but when I try to go

[squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

2021-01-13 Thread Greg Hulands
Hi, I am setting up squid 5.0.3 and during testing I have found some websites fail to have their certificates generated correctly. I am able to go to sites like YouTube.com and have the certificates for that be generated correctly, but when I try to go to some others, like

Re: [squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

2021-01-13 Thread Alex Rousskov
On 1/13/21 9:47 PM, Greg Hulands wrote: > I have put the ALL,9 log > here https://gist.github.com/ghulands/4a689db93fc87f9e7f69174f292f1914 > I can see it generates the certificate correctly, Agreed. Squid receives (from the helper) a generated certificate with the right wildcard CN, not a CA cer

Re: [squid-users] Incomplete Certificate Chain for wiki.squid-cache.org

2021-01-13 Thread Amos Jeffries
On 13/01/21 11:27 pm, Dieter Bloms wrote: Hello, the wiki of squid cache project (wiki.squid-cache.org) has an incomplete certificate chain. I can't access the website with enabled sslbump and tlsv1.3 support, because squid isn't able to download the missing intermediate certificate on its own.

Re: [squid-users] WARNING: no_suid: setuid(0): (1) Operation not permitted

2021-01-13 Thread Amos Jeffries
On 14/01/21 3:17 am, David Touzeau wrote: Hi This error is generated every 15 minutes when using any authenticator helper (ntlm, kerberos...) Is there a way to investigate on this issue ? kidxx| WARNING: no_suid: setuid(0): (1) Operation not permitted This looks like

Re: [squid-users] generate-host-certificates=on fails to generate certificates for _some_ hosts

2021-01-13 Thread Greg Hulands
Hi Alex, Thanks for the help. Comments inline. > On Jan 13, 2021, at 2:23 PM, Alex Rousskov > wrote: > > On 1/13/21 4:33 PM, Greg Hulands wrote: > >> I am setting up squid 5.0.3 and during testing I have found some >> websites fail to have their certificates generated correctly. I am >> able